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Description 

[0001] The present invention relates to cable televi- 
sion apparatus, and more particularly to a converter with 
remotely modifiable functionality provided by download- 
able software. 

[0002] Cable television converters are cun^ently avail- 
able that allow a cable system operator to remotely con- 
trol subscriber service authorizations from a central 
"headend" site. These units, which are commonly re- 
ferred to as "addressable converters", allow the cable 
system operator to control access to various premium 
services by sending a control signal from the headend 
to individual converters located at subscribers' homes. 
The authorization signals are carried on the cable tele- 
vision system, and enable individual subscribers to view 
programs that they pay an additional fee for. In opera- 
tion, the control signals typically enable the converter to 
descramble the premium channels for viewing by the 
subscriber. 

[0003] other addressable systems currently available 
^ allow a limited set of operational parameters to be down- 
loaded to a converter from the headend. Such opera- 
tional parameters include, for example, infomnation that 
maps displayed channels to tuned channels, time-out 
periods, barker channel(s), the converter output chan- 
nel, thetenninal configuration, and enable/disable func- 
tions for subscriber features such as remote hand-held 
control, parental control, favorite channel recall, volume 
control, and the like. The current state of the art is to 
download configuration infomnation for a set of features 
that have been predetermined at the time of manufac- 
ture or installation of the cable television converter. An 
example of such a converter is the Model DPV7200 ad- 
dressable converter manufactured by the Jerrold Divi- 
sion of General Instrument Corporation, Hatboro, Penn- 
sylvania, U.S.A. 

[0004] Other systems with downloadable data capa- 
bilities are also known. U.S. Patent 4,054,911 to Fletch- 
er, et al. relates to an infonnation retrieval system capa- 
ble of capturing packets or rows of video displayable da- 
ta and/or control program instructions from data contin- 
uously transmitted in a common predetemnined format. 
In the system disclosed in the patent, a user decides 
what infomnation Is to be retrieved, and takes action to 
cause a temninal to retrieve that infonnation. Although 
a user can vary the function of the temninal by capturing 
different transmitted data, it Is the user that detemnines 
what video displayable infomnation is to be received, 
and how the terminal which receives this infomnation is 
to process it. There is no disclosure or provision of 
means to enable a system operator to establish the 
functional operation of individual temninals on a multi- 
terminal network. 

[0005] In commonly owned U.S. Patent 4,712,239 to 
Frezza, et al. entitled "Security Arrangement for Down- 
loadable Cable Television Converters", a converter ca- 
pable of downloading is disclosed that prevents a false 


booter image from being downloaded. A false image 
could subject the system to various integrity problems, 
such as enabling an unauthorized user to view premium 
programs. In the patented system, a booter image is re- 

5 ceived on one channel and a checksum is computed 
therefrom. A valid checksum, extracted from tag data 
transmitted on a separate channel and associated with 
a scrambled program signal, is compared with the com- 
puted checksum. If the checksums do not match, a de- 

10 scrambler in the converter is precluded from descram- 
bling the program signal. The system disclosed in this 
patent downloads all of the operating software to a cable 
television converter over a dedicated "booter channel", 
to which the converter is force tuned when first turned 

'5 on. After the download is complete, the converter's data 
receiver Is returned to the regular data channel, where 
it remains until the converter is tumed off. 
[0006] EP 0 132 401 A2 discloses a system of trans- 
mitting infonnation individually and secretly. The infor- 

20 mation to be transmitted is converted, on the transmis- 
sion side, in accordance with a predetemnined algorithm 
designated by two keys and then transmitted to a receiv- 
ing side. The receiving side is supplied with at least two 
keys from the transmitting side for reproducing the 

25 transmitted infonnation by using the two keys. One of 
the keys is frequently changed so that the algorithm is 
also changed frequently. 

[0007] US 4,71 0,955 discloses a pay-per-view cable 
television system that uses a separate telephone line as 

30 a secondary communication path. 

[0008] In the system, a subscriber temninal includes 
a tunable converter arranged to receive command data 
and to download operational parameters fonA^arded 
from a headend. 

35 [0009] The article "Der Schlussel zum Scrambling- 
Problem?" of Charles Scheper in Funkschau 5/1989, 
pages 59 to 62 describes an access key for services on 
a cable system . A control word for accessing one or sev- 
eral services is provided. The control word is used for 

40 ordering services. 

[0010] GB 2 1 1 8 750 A discloses a system for down- 
loading infonnation, software modules and control data 
to selected temninals in order to provide additional func- 
tions such as unscrambling of pay-TV signals, and sub- 

45 scriber interaction signals. 

[001 1 ] It would be advantageous to provide a method 
and system for downloading software to a remote ter- 
minal, such as a cable television converter, to allow 
modification of virtually any or all software functions of 

50 the terminal by the system operator. It would be further 
advantageous for such a method and system to enable 
the system operator to replace or modify options that 
were predetemnined at the time of manufacture or instal- 
lation of the temninal. By effecting temninal modifications 

55 automatically from a headend location, such a method 
and system would eliminate the need for a technician to 
travel to a subscriber's home to modify or physically re- 
place a subscriber's temninal to effect such functional 
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modifications. 

[001 2] The present invention provides such a method 
and system for remotely modifying the functionality of a 
cable television converter or other terminal. 
[0013] In accordance with the present invention a ca- 
ble television addressable converter with remotely mod- 
ifiable functionality is provided. The converter compris- 
es frequency agile data receiver means capable of tun- 
ing to different carrier frequencies for receipt of address- 
able converter control data from a cable television head- 
end on a first channel and for receipt of operating soft- 
ware from said headend on a second channel of the dis- 
tributing cable; 

means fortuning said receiver means to said sec- 
ond channel by switching from a carrier frequency 
of the first channel to a carrier frequency of the sec- 
ond channel for receipt of the operating software in 
response to instructions contained In said address- 
able converter control data received on said first 
channel; 

memory means for storing the operating software 
received on said second channel; and 
processor means coupled to said memory means 
for accessing and executing the operating software 
received from said headend to provide at least one 
converter function. 

[0014] The converter according to one preferable em- 
bodiment includes means for receiving software down- 
loaded over a cable television network, and means cou- 
pled to the receiving means for storing the software. 
[0015] in another preferable embodiment means are 
provided for verifying the integrity of the software, and 
processor means coupled to the storing means access- 
es and executes the software to provide one or more 
converter functions dictated by the software. 
[0016] In a further preferable embodiment nonvolatile 
memory means are coupled to the processor means for 
storing default operation software for the converter. 
[0017] In an advantageous embodiment means re- 
sponsive to the verifying means cause the processor 
means to execute the default operation software, in- 
stead of the downloaded operating software, in the 
event the integrity of the software Is not verified. 
[001 8] Data receiving means are preferably provided 
for obtaining instructions downloaded over a cable tel- 
evision network. Downloaded software is received and 
stored by the converter only in response to specific in- 
structions received by the data receiving means. 
[001 9] The software receiving means and data receiv- 
ing means advantageously comprise a frequency agile 
data receiver, together with means forselectively tuning 
the receiver, to receive instructions on a first channel 
and downloaded software on a second channel. 
[0020] Timer means return the receiver to the first 
channel if the receiver has been tuned to the second 
channel for a predetemnined time period. The predeter- 


mined time period may be specified in instructions re- 
ceived on said first channel, and the length of the time 
period may be dependent on an amount of f imiware to 
be received. In this manner, a converter will not become 
5 stuck on the second channel by error, and be rendered 
unable to receive further instructions on the first chan- 
nel. 

[0021 ] The downloaded software received and stored 
by the converter can implement a functional layout on a 

10 keyboard associated with the converter. Software can 
also implement a feedback function, such as an LED 
(light-emitting-diode) display or on-screen display to as- 
sist a user in operating the converter. A control function 
for a video recorder coupled to the converter can also 

'5 be implemented by the software. Similarly, the software 
can implement a communication protocol for the con- 
verter, a descrambling technique for the converter, an 
on-screen display to be provided by the converter to a 
television coupled thereto, and/or a user interface to 

20 services provided over the cable television network. 
[0022] In a preferred embodiment of the present in- 
vention, software is transmitted in an encrypted fomri, 
and the instructions contain a key for decrypting the soft- 
ware. The software may also be received by the con- 

25 verter in a plurality of segments, with the instructions 
identifying the number of segments to be received for a 
complete software download. Means can be provided 
of determining if all of the segments have been validly 
received, and for receiving replacement segments if one 

30 or more segments of the software have not been validly 
received. Receipt of software can be prevented If the 
number of segments identified by the instructions is 
greater than a predetemiined limit. 
[0023] A cable television headend apparatus is pro- 

35 vided for downloading operating software to an address- 
able, remotely modifiable cable television converter. 
Means are provided for transmitting addressable con- 
verter data on a first data channel of a cable television 
network. Means are provided for transmitting operating 

40 software on a second data channel of the cable televi- 
sion network. An address specific to a particular con- 
verter is provided in the addressable converter data, 
which enables specific data to be received by the con- 
verter. Instructions are provided in the specific data, to 

45 cause the converter to receive software transmitted on 
the second channel. 

[0024] The cable television headend apparatus can 
further include means for verifying that software down- 
loaded to the converter has been successfully received 

50 by the converter. Billing means maintain records of the 
cable television services each converter on the system 
is authorized to receive, and the various functions the 
converter is to have, and can assign a particular soft- 
ware package to be downloaded to a particular convert- 

55 er on the basis of the functions specified for that con- 
verter. 

[0025] A method for providing a cable television ad- 
dressable converter with functions dictated by down- 
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loaded operating software is also provided. Converter 
addressable control data is received from a remote lo- 
cation via a cable television network. A designated soft- 
ware package is captured from a set of firmware pack- 
ages earned on the cable television network, in re- s 
sponse to instructions contained in the converter control 
data. The designated software package is stored in a 
memory provided in the converter, and is executed to 
provide at least one converter function dictated thereby. 
[0026] The software packages may be carried on the 
cabletelevision network in encrypted form, and decrypt- 
ed using a key contained in the converter control data. 
In one embodiment, the converter control data is re- 
ceived on a first data channel and the software packag- 
es are captured from a second data channel on the ca- 
ble television network. The first channel is monitored to 
receive converter control data, and the second channel 
is tuned to captured software upon receipt of appropri- 
ate instructions on the first channel. Reception is re- 
turned to the first channel afterthe software is captured. 
If the software has not been captured within a predeter- 
mined time period, reception switches back to the first 
channel from the second channel. 
[0027] Also in accordance with the present invention, 
a remotely modifiable user temriinal in the fomn of a cable 
television converter is provided which comprises means 
for receiving a plurality of cyclically transmitted software 
segments, the segments together comprising a soft- 
ware package. Means coupled to the receiving means 
verify each segment upon receipt thereof, and means 
are provided for storing each verified segment. A deter- 
mination is made as to whether a complete software 
package has been stored in the storing means at the 
completion of a software transmission cycle. If not, then 
reception, verification, and storage of transmitted soft- 
ware segments continues during a subsequent software 
transmission cycle. Reception of the software segments 
is tenninated upon a finding that a complete software 
package has been stored. Means can further be provid- 
ed for precluding the execution of the software seg- 
ments until a complete software package has been 
stored. 

[0028] The verifying means can operate by testing a 
checksum for each software segment as it is received. 
The tenninal may further comprise means for maintain- 
ing a record of the proper checksum for each segment, 
and means for periodically retesting the checksums af- 
ter a complete software package has been stored. De- 
fault operation software may be stored for the temilnal, 
and executed if the checksums are not verified upon re- 
testing. The complete software package may also be 
verified after it has been stored, and the default opera- 
tion software executed if the complete software package 
is not valid. The default operation software may also be 
executed if reception of software segments is not com- 
pleted during a predetermined time period. 
[0029] A complete software package may include a 
plurality of modules. Execution of fewer than all of the 


modules maybe precluded as an additional security fea- 
ture. 

[0030] The present invention provides a method and 
system for downloading software to a remote tenninal, 
such as a cable television converter, to allow modifica- 
tion of virtually any or all software functions of the ter- 
minal by the system operator. 
[0031] It is further advantageous for such a method 
and system to enable the system operator to replace or 
modify options that were predetemnined at the time of 
manufacture or installation of the tenninal. By effecting 
terminal modifications automatically from a headend lo- 
cation, such a method and system eliminates the need 
for a technician to travel to a subscriber's home to mod- 
ify or physically replace a subscriber's terminal to effect 
such functional modifications. 
[0032] The present invention provides a method and 
system for remotely modifying the functionality of a ca- 
ble television converter or other tenninal, which is oper- 
able in a nominal or baseline operation mode by down- 
loading specific software to the converters ^ 
[0033] Further features and advantages of the 
present invention are disclosed in the following descrip- 
tion and drawings. 
[0034] In the drawings: 

Figure 1 is a block diagram of a functionally modifi- 
able cable television converter system in accord- 
ance with the present invention; 
Figure 3 is a block diagram of the pertinent ele- 
ments of a converter used in connection with the 
system of the present invention; 
Figure 3 is a flowchart illustrating steps taken by the 
headend when it receives a new software package 
or an assignment to download software to a con- 
verter; 

Figure 4 is a flowchart illustrating the continuous 
transmission of software over a secondary data 
channel; 

Figure 5 is a flowchart illustrating the steps taken 
by a converter in receiving downloaded software; 
and 

Figure 6 is a flowchart illustrating the periodic rever- 
ification of downloaded software by a converter. 

[0035] Turning to Figure 1 , a cable television system 
is depicted having headend components, generally des- 
ignated 10 and subscriber components, generally des- 
ignated 12. The headend communicates with the sub- 
scriber via a distribution cable 36. A fimriware develop- 
ment system 16 is used to create new functional soft- 
ware packages for subscriber tenninals, such as con- 
verter 40. Software development system 16 may be 
physically located at the headend, but is more typically 
located at the facilities of a vendor which develops new 
software programs for sale to a cable system operator. 
New software packages may be transferred to an ad- 
dressable controller 14 located at the headend by mag- 
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netic tape 20 which is read by addressable controller 1 4, 
or by communication between the software develop- 
ment system 1 6 and addressable controller 1 4 via direct 
connection or modems 18 operating over conventional 
telephone lines. Those skilled in the art will recognize 
that other means may also be available for transferring 
software from software development system 16 to ad- 
dressable controller 14. 

[0036] Once software is resident in addressable con- 
troller 14, it is transmitted repeatedly over a data chan- 
nel. The data channel may be either the primary ad- 
dressable data channel provided in a conventional cable 
television network having addressable converters, or a 
separate secondary data channel. In either event, the 
data channel(s) can transmit the data on an FSK mod- 
ulated FM carrier or by any other suitable transmission 
scheme well known in the art. 
[0037] The use of a secondary channel for download- 
ing software to converters is illustrated in Figure 1 . Con- 
trol signals, including data such as converter addresses, 
program authorization codes, and the like is communi- 
cated from addressable controller 14 to a converter 40 
via control data modulator 26. The output of control data 
modulator 26 is coupled to distribution cable 36 via a tap 
34, and data is received therefrom by converter 40 via 
tap 38. The control data modulator transmits the data 
signals on a primary channel, and in accordance with 
the present invention, the data includes instructions to 
converter 40 which cause the converter to receive spec- 
ified software downloaded from addressable controller 
14. 

[0038] In the two channel embodiment illustrated in 
Figure 1 , the software Is transmitted on a secondary 
channel by software modulator 24, coupled to the cable 
network at tap 30. Upon receipt of instnjctions on the 
primary channel, converter 40 switches to the second- 
ary channel for receipt of designated software. An addi- 
tional data path 28 may optionally be provided via tap 
32 for receipt of data from converter 40 by addressable 
controller 14. Such data might include, for example, a 
verification that converter 40 has successfully received 
a software package it has been instructed to receive. 
The provision of a return path 28, which provides a "two- 
way" cable communication system, is well known in the 
art. 

[0039] Billing system 22 is provided at the headend 
for maintaining accounting information relating to charg- 
es incurred by subscribers on the cable system. In ac- 
cordance with the present invention, different software 
packages downloaded by headend 10 to converter 40 
may provide different converter functions, with higher 
levels of service providing increased converterfunction- 
ality. Billing system 22 keeps track of the level of sen^ice 
for each subscriber, and assigns particular software 
packages to subscriber converters on the basis of con- 
verter functionality to be provided to each subscriber. 
[0040] At the subscriber location 1 2, a subscriber may 
have one or more video appliances 42, 44 coupled to 


the output of converter 40. For example, video appliance 
42 might be a television set, and video appliance 44 
might be a video recorder f'VCR"). In accordance with 
the present invention, software downloaded to convert- 
5 er 40 can provide functions relating to a VCR. An exam- 
ple of such a function is time controlled programming. 
This function enables the converter to be programmed 
to make channel changes at various times so that the 
VCR can record different television programs on differ- 
to ent channels automatically and whiie unattended. Such 
a function can also enable "impulse pay-per-view" or- 
ders to be programmed into the converter by a subscrib- 
er, so that special premium programs can be ordered, 
when the subscriber is not home, and recorded on the 
15 subscriber's VCR for later viewing. 

[0041] Figure 2 is a block diagram illustrating the per- 
tinent components in one embodiment of a converter 40 
in accordance with the present invention. In the embod- 
iment illustrated, the converter receives addressable 
20 data on one data channel and downloaded software on 
another data channel. It is noted that both the address- 
able data and the software can also be received over a 
single data channel. Or, the software may be carried on 
some other media, such as the public telephone net- 
25 work. 

[0042] In the two channel embodiment illustrated in 
Figure 2, a microprocessor 50 receives data from cable 
36 via a frequency agile receiver 52. A transmitter 61 
and return path 62 can be provided from microprocessor 
30 50 back to addressable controller 14 in the event the 
converter is used with a two-way cable television sys- 
tem. Like receiver 52, transmitter 61 can be frequency 
agile to enable a choice of return transmission frequen- 
cies. 

35 [0043] Atuner54, underthe control of microprocessor 
50, tunes frequency agile receiver 52 to either a primary 
channel for receipt of addressable data (e.g., instruc- 
tions to capture a particular software package) or to a 
secondary channel for the receipt of software. Although 

40 a single secondary channel is described herein for pur- 
poses of illustration, it will be appreciated that any 
number of such secondary channels can be provided, 
depending on system requirements. Typically, frequen- 
cy agile receiver will be tuned to the primary channel, 

45 and will only switch to the secondary channel upon spe- 
cific instructions contained in data received on the first 
channel. In the alternate example where both address- 
able data and software are received on a single data 
channel, frequency agile receiver 52 and tuner 54 can 

50 be replaced with a fixed frequency data receiver. 

[0044] The provision of a dedicated secondary data 
channel as illustrated in Figure 2 is advantageous. By 
keeping software data off of the primary channel, the 
data throughput load on this channel is reduced. 

55 [0045] In the two channel embodiment, software data 
is broadcast cyclically on the second channel, by ad- 
dressable controller 14 at the headend. In a prefen^ed 
embodiment, a plurality of different software packages 
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are broadcast on the secondary channel, each package 
providing different converter functions or combinations 
of functions. Upon receipt of instructions on the prinnary 
channel, microprocessor 50 will cause tuner 64 to switch 
receiver 52 to the secondary channel for receipt of a 
designated software package. 
[0046] Various memory devices are coupled to micro- 
processor 50, including read only memory ("ROM") 65, 
operating random access memory ("RAM") 58, and non- 
volatile RAM 60. ROM 56 contains a program that allows 
converter 40 to retrieve and execute a downloaded soft- 
ware package. Upon receiving the proper command 
from the addressable controller, the converter aborts 
any downloaded package cun^ently being executed, ac- 
cesses the appropriate data channel for receipt of a des- 
ignated software package to be downloaded, and re- 
ceives and loads the software into nonvolatile firmware 
RAM 60. 

[0047] ROM 56 also contains default operation soft- 
ware, which is used to restore the converterto a nominal 
or "baseline" operation if a bad software download oc- 
curs. Such a nominal or "baseline" operation provides 
the basic functions to a converter, so that watching of at 
least one television program is possible. These basic 
functions in particular are predetennined options. As ex- 
plained below, if an en-or is detected in the receipt of 
downloaded software, or if the software is found to be 
invalid, the converter Is forced to execute only the de- 
fault operation software stored in ROM 56. 
[0048] A timer 64 Is associated with microprocessor 
50 to provide a time-out feature that prevents the con- 
verter from getting stuck on the secondary channel, in 
the event there is a problem receiving specified soft- 
ware. 

[0049] When billing system 22 assigns a new soft- 
ware package to a particular converter 40, addressable 
controller 14 is commanded to transmit instructions to 
the converter The instructions are received by micro- 
processor 50, and include an Identifier specifying which 
software package to receive, where to find the software 
package (i.e., on the primary or a specified secondary 
channel), a predetennined time limit defining how long 
the converter should attempt to receive the software be- 
fore aborting, a key to use In decrypting the data in the 
event it is encrypted, and the maximum segment 
number to be loaded (indicating how many segments 
are included in the software package to be received). 
While the software is being received, timer 64 counts 
down the time-out period specified in the down load com- 
mand. If the timer expires, microprocessorSO aborts the 
download, and returns to the original data channel. The 
time-out period specified in the download command can 
be varied depending on the amount of software to be 
downloaded. 

[0050] Timer 64 is also used in connection with a self- 
check that is periodically performed by the converter to 
ensure that the software has not changed since the last 
authorized download. This self-check is a security fea- 


ture to guard against infiltration of the converter by a 
"software pirate" who attempts to download unauthor- 
ized software to the converter, In an effort to steal serv- 
ices from the cable system. 

5 [0051] In accordance with the self -check procedure, 
timer 64 retests the checksum for each of the software 
segments at regular intervals after the software has 
been downloaded. In the event a checksum is found to 
be invalid, microprocessor 50 restores the converter to 

10 baseline operation by executing the default operation 
software contained in ROM 56. 
[0052] Converter 40 contains various other compo- 
nents with functions that can be modified by download- 
ed software. For example, a light-emitting-diode ("LED") 

15 display or other display 66 may be provided on the con- 
verter to give a user feedback concerning converter op- 
erations. Pressing a button on the converter, or its re- 
mote control unit, can cause an LED to light, verifying 
that the button has been pressed or that a function to 

20 be activated by the button has occun-ed. Such a feed- 
back function is useful to assist abuser in operating the 
converter. d , . 

[0053] The converter also includes a keyboard 68, the 
functional layout of which can be defined and/or modi- 

25 fled by software downloaded to the converter. Keyboard 
68 may be physically on the converter box, on a remote 
hand-held unit for the converter, or a separate keyboard 
can be provided in both places. 
[0054] Converter 40 also includes a descrambier 70 

30 for descrambling premium programs received via the 
cable television network. Various descrambling tech- 
niques are well known in the art, and different tech- 
niques can be implemented by downloading different 
software to the converter. 

35 [0055] Another feature that can be provided by con- 
verter 40 is the display of inf omnation on a user's televi- 
sion set. On-screen display driver 72 is provided for this 
purpose. An example of such a display Is the channel 
number tuned to, or the cun-ent time. In addition, on- 

40 screen displays can be used to distribute messages 
from the cable system operator, e.g., "your account is 
past due; please send us a check". An electronic mail, 
or "E-mail" feature can also be provided, enabling a sub- 
scriber to send and receive text messages on his tele- 

45 vision (or other display) via the cable system. The im- 
plementation and/or modifk;ation of on-screen displays 
can be provided by software downloaded to the convert- 
er. 

[0056] In order to provide a measure of protection 
50 against illegal use of the software download feature, the 
software is downloaded to the converter in an encrypted 
form. The data Is decrypted at the converter by a de- 
cryption module 74. A decryption key is transmitted to 
the converter from the headend as part of the address- 
55 able data instructions that command the converter to re- 
ceive a particular software package. Encryption and de- 
cryption schemes are well known In the art. Examples 
of such schemes are provided In commonly owned U. 


11 


EP 0 732 850 B1 


12 


S. Patent Nos. 4,638,356 of William A. Frezza, entitled 
"Apparatus and Method for Restricting Access to a 
Communication Network", and 4,710,955 of Marc W. 
Kautfman, entitled "Cable Television System with Two- 
Way Telephone Communication Path". 
[0057] A viewership monitor 76 can be provided in ac- 
cordance with the present invention to enable a cable 
system operator to detennine what programs and serv- 
ices a subscriber has received using each converter, 
and/or to retrieve a list of the functions which have been 
used on each converter. Viewership monitor 76 will 
monitor the operation of the converter, and store perti- 
nent data relating thereto. By addressing an appropriate 
command to the converter, the cable system operator 
will be able to upload the data to the headend for anal- 
ysis. 

[0058] Other functions that can be implemented by 
software downloaded to the converter include commu- 
nication protocols for the converter, and user interfaces 
to services provided over the cable television network. 
For example, a user may be provided with the capability 
to order pay-per-view programs on an impulse basis. 
The procedure for ordering such programs can be mod- 
ified through downloadable software. Utility meter read- 
ing can also be provided, by adding an asynchronous 
data port to the converter and controlling the retrieval of 
utility data via downloaded software. 
[0059] A flowchart illustrating a routine which can be 
used by the addressable controller in connection with 
the receipt and downloading of software is provided in 
Figure 3. The routine begins at box 80, and at box 82 a 
detemiination Is made as to whether a software update 
has been received from the software development sys- 
tem. If so, control passes to box 84 and the newsoftware 
data is encrypted. At box 86, the encrypted data is load- 
ed into the secondary data channel transmitter (soft- 
ware modulator 24) and continuously transmitted on the 
secondary channel together with other software pack- 
ages that can be provided to converters on the system. 
[0060] At box 88, a determination is made as to 
whether a new software package assignment has been 
made by billing system 22. If so, addressable controller 
1 4 sends an appropriate command on the primary chan- 
nel (control data modulator 26) as indicated at box 90. 
The command Is addressed to the particular converter 
that Is to receive the software, and identifies the channel 
the software is to be received from, identifies the soft- 
ware package to be received, provides the decryption 
key necessary to decrypt the software data, identifies 
the number of segments which make up the complete 
software package, and sets forth the time-out parameter 
defining the maximum time the converter should stay 
tuned to the secondary channel for receipt of the down- 
loaded software. 

[0061] The converter receives the software In fixed 
length "segments", and specific converter models will 
have specific maximum segment numbers detemiining 
the actual maximum size of allowable software down- 


loads. In a preferred embodiment, the maximum seg- 
ment number is a hard-coded parameter. Should an at- 
tempt be made to download software that exceeds the 
maximum size, the download will be rejected by the con- 

5 verter. In operation, the converter will Ignore the down- 
load command and will not switch to the secondary 
channel if the transmitted maximum segment number 
parameter exceeds the internal converter maximum. 
[0062] At box 92 of Figure 3, a determination is made 

10 as to whether an abort of a download is required. This 
would be the case, for example, if the addressable con- 
troller detects a problem with an attempted download. 
In the event an abort is required, an abort command is 
transmitted over the secondary channel as indicated at 

15 box 94. The converter will then switch back to the pri- 
mary channel, execute the default operation software to 
return to a baseline operation, and await a subsequent 
command from the addressable controller via the prima- 
ry data channel. At box 96, the routine of Figure 3 ends. 

20 ft will be appreciated by those skilled in the art that the 
routine of Figure 3 is called oh a periodic basis (or can 
be a continuous loop) to enable new software to be re- 
ceived from the software development system and to 
download software packages to converters at the com- 

25 mand of billing system 22. 

[0063] Figure 4 illustrates a routine that the address- 
able controller can use to continuously transmit 
fimriware data over the secondary channel. The routine 
commences at box 100, and at box 102 data is trans- 

30 mitted over the secondary channel. At box 1 04, a deter- 
mination is made as to whether the last segment of a 
software package has been transmitted. If not, transmis- 
sion of the remaining segments continues as indicated 
at box 1 02. Once the last segment has been transmitted, 

35 control passes to box 1 06 and the addressable control- 
ler transmits a check/execute command to the converter 
(s) that was to receive the software package. The check/ 
execute command Includes the software package 
number that was to be received, and a check pattern. 

40 The check pattern is used to verify the entire download 
prior to execution. When a check/execute command is 
received, the converter checks to see if all required seg- 
ments have been received, and that the check pattern 
downloaded matches the pattem calculated from the ac- 
tual downloaded data. If all checks are valid, the con- 
verter permits execution of the downloaded code, and 
retums to the primary data channel. After the check/ex- 
ecute command is sent at box 1 06 of Figure 4, control 
returns to box 102, and continuous transmission of the 

50 data proceeds over the secondary channel. 

[0064] Figure 5 Is a flowchart illustrating the capture 
of downloaded software by a converter. The routine be- 
gins at box 1 1 0, and control passes to box 1 1 2 where a 
detemiination Is made as to whether a software capture 

55 command has been sent to the converter. If not, the con- 
verter continuously waits for such a command to be re- 
ceived at box 112. 

[0085] Once a software capture command is re- 
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ceived, control passes from box 112 to box 120 for the 
actual capture of the software. At the same time, an an- 
cillary time-out process commences as indicated at box- 
es 114, 116, and 118. A timer counts down the time-out 
period specified in the software capture command. If the 
time-out period expires before the specified software 
package has been successfully captured, as deter- 
mined at box 114, control passes to box 116 where the 
download is aborted and the converter retums to the pri- 
mary data channel. As indicated at box 118, the default 
operation software is executed so that the converter can 
operate in a baseline mode until the appropriate soft- 
ware package can be properly downloaded. 
[0066] As indicated at box 120, before a software 
download commences, a detennination is made as to 
whether the number of segments contained in the soft- 
ware package to be downloaded is within bounds. In 
other words, as noted above, the maximum segment 
number of the software package to be downloaded must 
not exceed the maximum size allowable for the convert- 
er. If the number of segments exceeds the number al- 
lowed by the converter, the software capture command 
is ignored and control returns to box 112. Otherwise, the 
software capture proceeds and at box 122, the convert- 
er switches to the secondary channel (i.e., the channel 
on which the firmware is downloaded). At box 124, the 
segments comprising the software package are re- 
ceived, software is continuously broadcast on the sec- 
ondary data channel in small (e.g., 32 byte) encrypted 
packets. A converter that has been commanded to ac- 
cept a new package tunes to the appropriate channel 
and loads each packet that has the proper version iden- 
tifier. While loading, the converter keeps track of each 
segment successfully loaded in an internal segment bit 
map. As indicated at box 126, a detennination Is made 
as to whether a segment has been successfully loaded. 
This is accomplished by computing a checksum for each 
segment, and comparing the checksum with one down- 
loaded with the finnware segment. If the checksums 
match, the converter decrypts the data contained in the 
segment, stores the data, and sets an appropriate bit in 
a software segment bit map as indicated at box 130, In 
storing the data, if prior software has been stored in the 
converter, the appropriate segment of the prior software 
is overwritten with the newly received data. 
[0067] If it is determined at box 126 that a segment 
has not been property loaded (i.e., the computed and 
downloaded checksums do not match), the converter ig- 
nores the segment and proceeds directly to box 1 32. At 
box 132, a detennination is made as to whether the last 
segment in a software package has been received. If 
not, control returns to box 124 and the procedure con- 
tinues until all segments are received. 
[0068] After the last segment has been received, con- 
trol passes to box 134 which determines if the bit map 
created at box 1 30 is complete. If the bit map is not com- 
plete, it means that one or more segments were not 
property loaded and an attempt to receive these seg- 


ments will be made during the next transmission cycle 
of the software. In this event, control returns from box 
132 to box 124 where an attempt to receive the entire 
finnware package will again be made. 

5 [0069] As is evident from the flowchart of Figure 5, an 
incorrectly received segment will not overwrite a previ- 
ously con'ectly received segment. All correctly received 
segments, however, will overwrite previously received 
segments. In this manner, even if there are errors in the 

^0 transmission of certain segments during a download cy- 
cle, all of the segments should be correctly received af- 
ter the completion of several complete transmission cy- 
cles of a software package. 

[0070] Once all of the segments have been properly 
IS received, the bit map will be complete, and box 1 34 will 
pass control to box 136. Box136 responds to the check/ 
execute command transmitted by the addressable con- 
troller at box 106 in Figure 4. When the check/execute 
command is received, the converter checks to see if all 
20 required segments have been received and that the 
check pattern downloaded matches a pattern calculated 
from the actual downloaded data (i.e., the complete soft- 
ware package). If the patterns do not match, control re- 
turns to box 124 and additional attempts are made to 
25 receive the software as long as a time-out (box 114) has 
not occurred. 

[0071] If the entire software package is detennined to 
be valid at box 136, control passes to box 138 and an 
execution bit is set permitting the software to be execut- 

30 ed. As an additional level of protection against a soft- 
ware pirate, software contained in the converter's ROM 
(ROM 56 - Figure 2) can periodically detemnine if all of 
the functional modules contained in the software pack- 
age are being executed, and if not, subsequent execu- 

35 tion of the software can be precluded by tuming off a 
separate, special execution bit maintained by the con- 
verter 

[0072] At box 140, the downloading of a software 
package is complete, and the converter retums to the 

^0 primary data channel. The routine ends at box 142. 
[0073] The software download process is a destruc- 
tive one. Once a converter receives the command to ac- 
cept a new package, the old downloaded software (if 
any) is effectively deleted and cannot be executed. In 

45 the preferred embodiment, partial downloads are not 
supported, and an entire package must be sent. This 
further fmstrates a software pirate's efforts, and allows 
a software download to be nullified by sending the com- 
mand to accept a package immediately followed by 

50 sending the command to return to the primary data 
channel. 

[0074] The various commands sent by the addressa- 
ble controller to support the finnware download process 
are: 

55 

Accept Software Download 
Return to Primary Channel 
Disallow Downloaded Execution 
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Load Software Segment 
Check/Execute Software 
Send Software Check Pattern 

[0075] The "Accept Software Download" command is 
used to initiate the software download process. It may 
be sent to one individual converter or globally to a set 
of converters that understand a group address. The ad- 
dressed converter(s) prepares to accept the package 
number, on the appropriate channel, using the given 
firmware decryption key and maximum segment 
number. The software download time-out value is also 
given. Upon reception of this command, the converter 
goes into its software download mode, in which it must 
not execute any downloaded code. 
[0076] The "Return to Primary Channel" command is 
used to force a converter to return to the primary data 
channel. This command may also be sent In a specific 
fomnat to an individual converter, or in group format to 
a set of converters. All converters receiving this com- 
mand abort the current software download, clear their 
software segment bit maps, and exit the software down- 
load mode, 

[0077] The "Disallow Downloaded Execution" com- 
mand explicitly disallows the execution of any down- 
loaded software. It may be sent in the specific or group 
fomriat. All converters receiving this command abort ex- 
ecution of any downloaded software, clear their soft- 
ware segment bit maps, exit software download mode, 
and execute the default operation software contained in 
ROM for baseline operation. Another method of prohib- 
iting downloaded software from being executed is to 
send an "Accept software Download" command imme- 
diately followed by a "Return to Primary Channel" com- 
mand. 

[0078] The "Load Software Segment" command is 
used to download the individual segments of a software 
package. All converters receiving this command, if in 
software reception mode, ovenvritethe appropriate seg- 
ment of software by the received data. Before actually 
overwriting the code, the converter checks to see if the 
package number matches the commanded package 
number, and calculates the segment check pattern from 
the received data. If the check pattern is correct, the seg- 
ment data is decrypted, the appropriate prior segment 
is overwritten with the new segment, and the appropri- 
ate bit in the software segment bit map is set. 
[0079] The "Check/Execute Software" command is 
used to terminate the software download process. All 
converters receiving this command respond only if the 
package number matches the one sent originally in the 
"Accept Software Download" command, and if in soft- 
ware reception mode. If so, the converter checks to see 
if all of the necessary segments of software have been 
con-ectly received. If they have been, the package check 
pattem is calculated and tested. If the check pattern is 
bad, the converter ignores the command. If the check 
pattem is good, the converter pemnits execution of the 


newly downloaded package, switches back to the pri- 
mary data stream, exits the software download mode, 
and clears its software download segment bit map. 
[0080] The "Send Software Check Pattem" command 
5 is used to verify the software download process. A con- 
verter receiving this command responds only if it is not 
in software reception mode. In this event, the converter 
reports the check pattern of the appropriate segment or 
of the entire package. This verification scheme is only 
10 available on a two-way cable system. 

[0081] Figure 6 illustrates a periodic self-check rou- 
tine used by the converter to test the validity of down- 
loaded software to ensure that it has not changed since 
the last download. This self-check is performed by the 
15 converter itself, and no addressable controller com- 
mand is required to initiate it. The routine begins at box 
150. At box 152, a clock runs to keep track of time. At 
box 154, a detennination is made as to whether a pre- 
detemiined time interval has passed. If not, the routine 
20 loops back to box 152 and the process continues until 
the time intervahhas run. Then, box 154 passes control 
to box 156 to comrrience the periodic self -check. 
[0082] At box 156, the first segment of the software 
package is tested by computing its checksum. At box 
25 158, a detemriination is made as to whether the check- 
sum is the proper checksum for that segment. If not, 
control passes to box 160 and the default operation soft- 
ware is executed to return the converter to baseline op- 
eration. If the checksum for the segment is proper, con- 
30 trol passes to box 1 62, which determines if the segment 
just tested is the last segment in the software package. 
If not, the routine loops back to box 1 56 so that all of the 
segments in the software package can be tested. 
[0083] Once the last segment has been tested, con- 
35 trol is passed from box 1 62 to box 1 64 where the clock 
is reset. Control then loops back to box 152 and the 
process continues, so that the self-check will be period- 
ically perfomied at the time interval dictated by the time- 
out detemilnation function at box 154. 
40 [0084] it will now be appreciated that the present in- 
vention provides a method and apparatus for remotely 
modifying the functionality of a temninal, such as a cable 
television converter Temninal functions are dictated by 
downloaded software. The software is transmitted in 
^5 small segments to reduce the likelihood and severity of 
transmission en-ors, and to reduce the temporary buff- 
ering requirements within the tenninal. Each section of 
a software package is transmitted with an identifier in- 
dicating which segment it is, and which software pack- 
so age it is part of, A multiplicity of software packages may 
be carried on a single system, with different terminals in 
the system accepting and executing different packages 
as specified by the system headend. 
[0085] The software is stored at the tenninal in non- 
55 volatile memory, such as RAM with a battery backup. 
Various safeguards are provided to ensure that the soft- 
ware is accurately downloaded, and to frustrate the ef- 
forts of a software pirate attempting to infiltrate the sys- 
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tern. 

[0086] Although the present invention has been de- 
scribed in connection with a prefen-ed embodiment, it 
will be appreciated that many modifications and adap- 
tations may be made thereto without departing from the 
scope of the invention as set forth in the following claims. 


Claims 

1. A cable television addresable converter with re- 
motely modifiable functionality comprising: 

frequency agile data receiver means (52) capa- 
ble of tuning to different carrier frequencies for 
receipt of addressable converter control data 
from a cable television headend (10) on a first 
channel of a distribution cable (36) and for re- 
ceipt of operating software from said headend 
on a second channel of the distribution cable 
(36); 

means (54) fortuning said receiver means (52) 
to said second channel by switching from a car- 
rier frequency of the first channel to a carrier 
frequency of the second channel for receipt of 
the operating software in response to instruc- 
tions contained in said addressable converter 
control data received on said first channel; 
memory means (60) for storing the operating 
software received on said second channel; and 
processor means (50) coupled to said memory 
means (60) for accessing and executing the op- 
erating software received from said headend 
(1 0) to provide at least one converter function. 

2. The converter of claim 1 further comprising: 

means for verifying the integrity of said operat- 
ing software received on said second channel; 
and 

means for causing said processor means to ex- 
ecute default operation software instead of said 
operating software in the event the integrity of 
said operating software is not verified. 

3. The converter as defined in one of claims 1 or 2 fur- 
ther comprising: 

timer means for returning said receiver to said 
first channel if it has been tuned to said second 
channel for a predetemnined time period. 

4. The converter of claim 3 wherein said predeter- 
mined time period is specified in instructions con- 
tained in said addressable converter control data 
received on said first channel. 

5. The converter as defined in one of claims 3 or 4 
wherein the length of said predetemnined time pe- 


riod is dependent on the amount of said operating 
software to be received. 

6. The converter as defined in one of claims 1 to 5 
5 wherein said operating software implements a func- 
tional layout of a keyboard associated with said con- 
verter. 

7. The converter as defined in one of claims 1 to 6 
'0 wherein said operating software implements a feed- 
back function to assist a user in operating the con- 
verter. 

8. The converter as defined in one of claims 1 to 7 
15 wherein said operating software implements a con- 
trol function for a video recorder coupled to the con- 
verter. 

9. The converter as defined in one of claims 1 to 8 
20 wherein said operating software implements a com- 
munication protocol for the converter. 

10. The converter as defined in one of claims 1 to 9 
wherein said operating software implements a de- 

25 scrambling technique for the converter. 

11. The converter as defined in one of claims 1 to 10 
wherein said operating software implements an on- 
screen display to be provided by the converter to a 

30 television coupled thereto. 

12. The converter as defined in one of claims 1 to 11 
wherein said operating software implements a user 
interface to services provided over a cable televi- 

35 sion network. 

13. The converter as defined in one of claims 1 to 12 
wherein said operating software implements an 
electronic mail capability to be provided over a ca- 

^0 ble television network. 

14. The converter as defined in one of claims 1 to 13 
wherein said operating software implements a 
viewership monitoring function. 

45 

15. The converter as defined in one of claims 1 to 14 
further comprising: 

means for enabling the downloaded operating 
software to be received and stored by the converter 
50 only in response to specific instructions received by 
said data receiving means. 

16. The converter as defined in one of claims 1 to 15 
wherein said operating software is transmitted in an 

55 encrypted form, and said instructions contain a key 
for decrypting the operating software. 

17. The converter as defined in one of claims 1 to 16 


20 
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10. 
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wherein said operating software is received In a plu- 
rality of segments, and said instructions identify the 
number of segments to be received for a complete 
operating software download. 

18. The converter of claim 17 further comprising: 

means for determining if all of said segments 
have been validly received; and 
means for receiving replacement segments if 
one or more segments of said operating soft- 
ware has not been validly received. 

19. The converter as defined in one of claims 17 or 18 
further comprising: 

means for preventing the receipt of said oper- 
ating software if the number of segments identified 
by said instructions is greater than a predetennined 
limit. 

20. Cable television headend apparatus for download- 
ing operating software to an addressable remotely 
modifiable cable television converter (40), compris- 
ing: 

means (26) for transmitting addressable con- 
verter control data on a carrier frequency of a 
first data channel of a distribution cable (36) of 
- a cable television network; 

means (24) for transmitting operating software 
on a carrier frequency of a second data channel 
of the distribution cable (36) of said cable tele- 
vision network: 

means (1 4) for providing an address in said ad- 
dressable converter control data specific to a 
particular converter (40) coupled to the net- 
work, said address enabling specific data to be 
received by said converter (40) on said first da- 
* ta channel; and 
means (50) for providing instructions in said 
specific data, said instructions causing said 
converter to switch from said earner frequency 
of said first channel to said carrier frequency of 
said second channel to receive the operating 
software transmitted on said second channel. 

21 . The apparatus of claim 20 further comprising: 

means for verifying that operating software 
downloaded to said converter has been successful- 
ly received by the converter 

22. The apparatus as defined in one of claims 20 or 21 
further comprising: 

billing means for maintaining a record of func- 
tions said converter is authorized to have, and for 
assigning a particular operating software package 
to be downloaded to said converter on the basis of 
the authorized functions. 


23. A method for providing a cable television address- 
able converter with functions dictated by download- 
ed operating software, comprising the steps of: 

receiving addressable converter control data 
from a remote headend location on a first chan- 
nel of a distribution cable; 
switching data receiver means (52) from a car- 
rier frequency of said first channel to a carrier 
frequency of a second channel in response to 
instructions contained in said addressable con- 
verter control data; 

capturing a designated operating software 
package, from a set of operating software pack- 
ages transmitted from said remote headend lo- 
cation on said second channel of the distribu- 
tion cable, in response to instructions con- 
tained in said addressable converter control da- 
ta; 

^, storing the designated operating software 
^ jipackage received on said second channel in a 
-^-memory provided in said converter; and 
executing said operating software to provide at 
least one converter function dictated thereby 

24. The method of claim 23 wherein the operating soft- 
ware packages are transmitted in encrypted fonn, 
said method comprising the further step of: 

decrypting the captured operating software 
using a key contained in said converter control data. 

25. The method of claim 23 or 24 comprising the further 
steps of: 

monitoring said first channel to receive said ad- 
dressable converter control data; 
switching to said second channel to capture 
said operating software upon receipt of appro- 
priate instructions on said first channel; and 
^ \->:switching back to said first channel after said 
operating software is captured. 

26. The method of claim 25 comprising the further step 
of: 

switching back to said first channel from said 
second channel upon the expiration of a predeter- 
mined time period, if the operating software has not 
been captured within said time period. 

27. The method of claim 26 comprising the further step 
of: 

deriving said time period from said addressa- 
ble converter control data received on said first 
channel. 

28. The method as defined in one of claims 28 or 27 
wherein the length of the time period Is dependent 
on the amount of said operating software to be cap- 
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tured. 

29. A remotely modifiable usertemriinal In thefomi of a 
cable television converter according to one of the 
claims 1 to 19, said user tenninal comprising: 

means for receiving a plurality of cyclically 
transmitted operating software segments to- 
gether fomning an operating software package; 
means coupled to said receiving means for ver- 
ifying each segment upon receipt thereof; 
means responsive to said verifying means for 
storing each verified segment; 
means for detennining if a complete operating 
software package has been stored in said stor- 
ing means at the completion of an operating 
software transmission cycle; 
means responsive to said detennining means 
for continuing to receive, verify, and store trans- 
mitted operating software segments during a 
subsequent operating software transmission 
cycle if said detennining means finds that a 
complete operating software package has not 
been stored; and 

means for temninating the reception of said op- 
erating software segments upon a finding by 
said detennining means that a complete oper- 
ating software package has been stored. 

30. The tenninal of claim 29 further comprising: 

means for precluding the execution of said op- 
. erating software segments until a complete operat- 
ing software package has been stored. 

31. The terminal as defined in one of claims 29 or 30 
wherein said verifying means tests a checksum for 
each operating software segment, said tenninal fur- 
ther comprising: 

means for maintaining a record of the proper 
checksum for each segment; and 
means for periodically retesting said check- 
sums after a complete operating software pack- 
age has been stored. 

32. The tenninal of claim 31 further comprising: 

means for storing default operation software for 
said terminal; and 

means for executing said default operation soft- 
ware if said checksums are not verified upon 
retesting. 

33. The tenninal as defined in one of claims 29 to 32 
further comprising: 

means for validating the complete operating 
software package after it has been stored. 


34. The tenninal of claim 33 further comprising: 

means for storing default operation software for 
said tenninal; and 
5 means for executing said default operation soft- 

ware if said validating means determines that 
the complete operating software package is not 
valid. 

10 35. The terminal as defined in one of claims 29 to 34 
further comprising: 

timer means for terminating the reception of 
operating software segments after a predetermined 
time period. 

15 

36. The tenninal of claim 35 further comprising: 

means for storing default operation software for 
said tenninal; and 
20 _ means for executing said default operation soft- 
™ ware if said timer means temninates the recep- 
tion of said operating software segments. 

37. The tenninal as defined in one of claims 29 to 36 
25 wherein the execution of said operating software 

provides at least one converter function of the cable 
television converter 

38. The tenninal as defined in one of claims 29 to 37 
30 wherein a complete operating software package in- 
cludes a plurality of modules, said tenninal further 
comprising: 

means for precluding the execution of down- 
loaded operating software if fewer then all of the 
35 modules are available for execution. 

39. Method for providing downloaded operating soft- 
ware to an addressable remotely modifiable cable 
television converter by a cable television headend 

40 :^-^i-rapparatus, comprising the steps of: 

transmitting addressable convertercontrol data 
on a carrier frequency of a first data channel of 
a distribution cable of a cable television net- 
45 wori(; 

transmitting said operating software on a earn- 
er frequency of a second data channel of the 
distribution cable of said cable television net- 
wortc; 

50 providing an address in said addressable con- 

verter control data specific to a particular con- 
verter coupled to the network, said address en- 
abling specific data to be received by said con- 
verter on said first data channel; and 

55 providing instructions In said specific data, said 

instmctions causing said converter to switch 
from said earner frequency of said first channel 
to said earner frequency of said second chan- 
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nel to receive said operating software transmit- 
ted on said second channel. 


Patentansprtiche 

1 . Ein adressierbarer Kabelf emsehkonverter mit fem- 
modifizierbarer Funktion, bestehend aus: 

einem frequenzagilen Datenempfangsmittel 
(52), dassich auf verschiedeneTragerfrequen- 
zen zum Empfang addressierbarer Konverter- 
steuerdaten von einer Kabelfemsehkopfstelle 
(10) auf einem ersten Kanal eines Verteilerka- 
bels (36) und zum Empfang von Betriebssoft- 
ware von der Kopfstelle auf einem zweiten Ka- 
nal des Verteilerkabels (36) abstimmen kann; 

einem Mittel (54) zum Abstimmen des Emp- 
f angsmittels (52) auf einen zweiten Kanal durch 
das Schalten von einer Tragerfrequenz des er- 
sten Kanals auf eine Tragerfrequenz des zwei- 
ten Kanals zum Empfang der Betriebssoftware 
als Antwort auf in den addressierbaren Konver- 
tersteuerdaten, welche auf dem ersten Kanal 
empfangen werden, enthaltene Befehle; 

einem Speichermittel (60) zum Speichern der 
auf dem zweiten Kanal empfangenen Betriebs- 
software; und 

einem Prozessomriittel (50), das mit dem Spei- 
chemriittel (60) verbunden ist, zum Zugreifen 
auf und Ausfuhren der von der Kopfstelle (10) 
empfangenen Betriebssoftware, urn minde- 
stens eine Konverterfunktion bereitzustellen. 

2. Konverter gemaB Anspruch 1, ferner bestehend 
aus: 

einem Mittel zum Feststellen der Integritat der 
auf dem zweiten Kanal empfangenen Betriebs- 
software; und 

einem Mittel zum Bewirken, da3 das Prozes- 
sormittel anstatt der Betriebssoftware eine 
Standardfunktionssoftware ausfuhrt, wenn die 
Integritat der Betriebssoftware nichtfestgestellt 
wird. 

3. Konverter gemaB einem der Anspriiche 1 Oder 2, 
ferner bestehend aus: 

einem Zeitgebermittel zum Zuruckstellen des 
Empfangers auf den ersten Kanal, wenn er iiber ei- 
nen vorgegebenen Zeitraum auf den zweiten Kanal 
abgestimmt gewesen ist. 

4. Konverter gemaB Anspruch 3, wobei der vorgege- 
bene Zeitraum in Befehien, die in den addressier- 


baren Konvertersteuerdaten, welche auf dem er- 
sten Kanal empfangen werden, enthalten sind, spe- 
zifiziert wird. 

5 5. Konverter gemaB einem der Anspriiche 3 oder 4, 
wobei die Lange des vorgegebenen Zeitraums von 
dem Umfang der zu empfangenden Betriebssoft- 
ware abhangig ist. 

to 6. Konverter gemaB einem der Anspruchel bis 5, wo- 
bei die Betriebssoftware eine Funktionskonfigu rati- 
on einer mit dem Konverter verbundenen Tastatur 
implementiert. 

15 7. Konverter gemaB einem der Anspriiche 1 bis 6, wo- 
bei die Betriebssoftware eine RQckkopplungsfunk- 
tion implementiert, um einem Verwender beim Be- 
tatigen des Konverters zu helfeh. 

20 8. Konverter gemaB einem der Anspriiche 1 bis 7, wo- 
be! die Betriebssoftware eine Steuemngsfunktion 
%- fur einen mit dem Konverter verbundenen Videore- 
korder Implementiert. 

25 9. Konverter gemaB einem der Anspriiche 1 bis 8, wo- 
bei die Betriebssoftware eIn Kommunikationsproto- 
koll fiir den Konverter implementiert. 

10. Konverter gemaB einem der Anspriiche 1 bis9,wo- 
30 bei die Betriebssoftware ein Entwiirfelverfahren fur 

den Konverter implementiert. 

11. Konverter gemaB einem der Anspriiche 1 bis 10, 
wobei die Betriebssoftware eine Anzeige auf dem 

35 Bildschinn implementiert, die von dem Konverter an 
einen damit verbundenen Fernseher bereitzustel- 
len ist. 

12. Konverter gemaB einem der Anspriiche 1 bis 11, 
^0-. wobei die Betriebssoftware eine Benutzeroberfla- 

che zu iiber ein Kabelfemsehnetzwerk bereitge- 
stellten DIenstleistungen implementiert. 

13. Konverter gemaB einem der Ansjariiche 1 bis 12, 
45 wobei die Betriebssoftware eine Fahigkeit fur elek- 

tronischen Briefdienst implementiert, die iiber ein 
Kabelfemsehnetzwerk bereitzustellen ist. 

14. Konverter gemaB einem der Anspriiche 1 bis 13, 
50 wobei die Betriebssoftware eine Zuschaueriibenwa- 

chungsfunktion Implementiert. 

15. Konverter gemaB einem der Anspriiche 1 Oder 14, 
ferner bestehend aus: 

55 

einem Mittel zum Emnoglichen, daB die herun- 
tergeladene Betrlebssofhware nur als Antwort 
auf spezifische vom Datenempfangsmittel 
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empfangene Befehle vom Konverter empfan- 
gen und gespeichert werden. 

16. Konverter gemaB einem der AnsprOche 1 bis 15, 
wobei die Betriebssoftware In verschlusselter Form s 
ubertragen wird und die Befehle einen SchlQssel 
enthalten, urn die Betriebssoftware zu entschliis- 
seln. 

17. Konverter gemaB einem der Anspriiche 1 bis 16, io 
wobei die Betriebssoftware in einer VIelzahi von 
Segmenten empfangen wird und die Befehle die 
Anzahl der fur eine vollstandige Herunterladung der 
Betriebssoftware zu empfangenden Segmente 
identifizieren. is 

18. Konverter gemaB Anspruch 17, femer bestehend 
aus: 

einem Mittel zum Bestimmen, ob alle Segmen- 20 
te richtig empfangen worden sind; und ^'^ 

einem Mittel zum Empfangen von Ersatzseg- 
menten, wenn ein odermehrere Segmente der 
Betriebssoftware nicht richtig. empfangen wor- 25 
den sind. 

19. Konverter gemaB einem der Ansprxiche 1 7 Oder 1 8, 
ferner bestehend aus: 

30 

einem Mittel zum Verhindern des Empfangs der 
Betriebssoftware, wenn die Anzahl der von den 
Befehlen identifizierten Segmente groBer als 
eine vorgegebene Grenze ist. 

35 

20. Kabelfemsehkopfstellenvorrichtung zum Herunter- 
laden von Betriebssoftware auf einen adressierba- 
ren, fernmodifizierbaren Kabelfernsehkonverter 
(40), bestehend aus: 

40 

einem Mittel (26) zum Ubertragen addressier- 
barer Konvertersteuerdaten auf einer Trager- 
frequenz eines ersten Datenkanals eines Ver- 
teilerkabels (36) eines Kabelfernsehnetzwerks; 

45 

einem Mittel (24) zum Ubertragen von Betriebs- 
software auf einer Tragerfrequenz eines zwei- 
ten Datenkanals des Verteilerkabels (36) des 
Kabelfernsehnetzwerks; 

50 

einem Mittel (14) zum Bereitstellen einer 
Adresse in den adressierbaren Konvertersteu- 
erdaten, die spezifisch fur einen einzelnen 
adressierbaren, mit dem Netzwerk verbunde- 
nen Konverter (40) ist, wobei die Adresse er- 55 
moglicht, daB spezif ische Daten vom Konverter 
(40) auf dem ersten Datenkanal empfangen 
werden; und 


einem Mittel (50) zum Bereitstellen von Befeh- 
len in den spezif ischen Daten, wobei die Befeh- 
le bewirken, daB der Konverter von der Trager- 
frequenz des ersten Kanals auf die Tragerfre- 
quenz des zwerten Kanals schaltet, urn die auf 
dem zweiten Kanal ubertragene Betriebssoft- 
ware zu empfangen. 

21 . Vorrichtung gemaB Anspruch 20, femer bestehend 
aus: 

einem Mittel zum Feststellen, daB auf den Kon- 
verter heruntergeladene Betriebssoftware er- 
folgreich vom Konverter empfangen worden ist. 

22. Vorrichtung gemaB einem der Anspruche 20 oder 
21 , femer bestehend aus: 

einem Fakturierungsmittel zum Festhalten der 
Funktionen, die der Konverter aufweisen darf, 
und zum Zuordnen eines besonderen Betriebs- 
software-Pakets, das auf der Basis der berech- 
tigten Funktionen auf den Konverter herunter- 
zuladen ist. 

23. Ein Verfahren zum Bereitstellen eines adressierba- 
ren Kabelfernsehkonverters mit von der herunter- 
geladenen Betriebssoftware diktierten Funktionen, 
bestehend aus fotgenden Schritten; 

Empfangen adresslerbarer Konvertersteuer- 
daten von einer abgesetzten Kopfstellenort auf 
einem ersten Kanal eines Verteilerkabels; 

Schalten des Datenempfangsmittels (52) von 
einer Tragerfrequenz des ersten Kanals auf ei- 
ne Tragerfrequenz des zweiten Kanals als Ant- 
wort auf in den addressierbaren Konvertersteu- 
erdaten enthaltene Befehle; 

Festhalten eines bestimmten Betriebssoft- 
ware-Pakets aus einem Satz von Betriebssoft- 
ware-Paketen, welche von dem abgesetzten 
Kopfstellenort auf dem zweiten Kanal des Ver- 
teilerkabels ubertragen werden, in Antwort auf 
in den addressierbaren Konvertersteuerdaten 
enthaltene Befehle; 

Speichern des bestimmten, auf dem zweiten 
Kanel empfangenen Betriebssoftware-Pakets 
in einem in dem Konverter bereitgestellten 
Speicher; und 

Ausfuhren der Betriebssoftware, um minde- 
stens eine dadurch diktierte Konverterfunktion 
bereitzustellen. 

24. Verfahren gemaB Anspruch 23, wobei die Betriebs- 
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software-Pakete in verschtusselter Form iibertra- 
gen warden, wobei das Verfahren aus folgendem 
Schritt besteht: 

Entschlussein der festgehaltene Betriebssoft- 5 
ware unter Verwendung eines in den Konver- 
tersteuerdaten enthaltenen Schlussels. 


25. Verfahren gema3 Anspruch 23 oder 24, ferner be- 
stehend aus folgenden Schritten: 

Oberwachen des ersten Kanals, urn addres- 
sierbare Konvertersteuerdaten zu empfangen; 


10 


einem Mittel zum Bestimmen, ob ein vollstan- 
diges Betriebssoftware-Paket in dem Speicher- 
mittel beim AbschluB eines Betriebssoftware- 
Ubertragungszyklus gespeichert worden ist; 

einem IS^ittel, das auf das Bestimmungsmittel 
anspricht, zum weiteren Empfangen, Feststel- 
len und Speichern ubertragener Betriebssoft- 
ware-Segmente wahrend eines nachfolgenden 
Betriebssoftware-Ubertragungszyklus, wenn 
das Bestimmungsmittel erkennt, daB ein voll- 
standlges Betriebssoftware-Paket nicht ge- 
speichert worden ist; und 


Schalten auf den zweiten Kanal, urn Betriebs- 
software beim Empfang geeigneter Befehle auf 
dem ersten Kanal festzuhalten; und 

Zuriickschalten auf den ersten Kanal, nachdem 
die Betriebssoftware festgehalten worden ist. 

26. Verfahren gemaB Anspruch 25, femer bestehend 
aus folgendem Schritt: 

Zuriickschalten von dem zweiten Kanal auf den 
ersten Kanal nach Ablauf eines vorgegebenen 
Zeitraums, wenn die Betriebssoftware inner- 
halb des Zeitraums nicht festgehalten worden 
ist. 

27. Verfahren gemaB Anspruch 26, femer bestehend 
aus folgendem Schritt: 

Ennittein des Zeitraums aus den auf dem er- 
sten Kanal empfangenen adressierbaren Kon- 
vertersteuerdaten. 

28. Verfahren gemaB einem der Anspriiche 26 oder 27, 
wobei die Lange des Zeitraums von der Menge der 
festzuhaltenden Betriebssoftware abhangig istr 

29. Eine fernmodifizierbare Benutzerstation in der 
Fomn eines Kabelfernsehkonverters gemaB einem 
der Anspriiche 1 bis 1 9, wobei die Benutzerstation 
aus folgendem besteht: 

einem Mittel zum Empfangen einer Vielzahl 
von zyklisch iibertragenen Betriebssoftware- 
segmenten, die gemeinsam ein Betriebssoft- 
ware-Paket bilden; 

einem mit dem Empfangsmittel verbundenen 
Mittel zum Feststellen jedes Segments bei des- 
sen Empfang; 

einem Mittel, das zum Speichern jedes festge- 
stellten Segments auf das Feststellungsmittel 
anspricht; 


15 


20 


25 


einem Mittel zum Beenden des Empfangs der 
Betriebssoftware-Segmente, wenn das Be- 
stimmungsmittel erkennt, daB ein vollstandiges 
Betriebssoftware-Paket gespeichert worden 
ist. 

30. Station gemaB Anspnjch 29, ferner bestehend aus: 

einem Mittel zum Verhindern des Ausfiihrens 
der Betriebssoftware-Segmente bis ein voll- 
standiges Betriebssoftware-Paket gespeichert 
wird. 


31. Station gemaB einem der Anspriiche 29 oder 30, 
. wobei das Feststellungsmittel eine Prufsumme fiir 
30 jedes Betriebssoftware-Segment priift, wobei die 
Station ferner aus folgendem besteht: 

einem Mittel zum Festhalten der richtigen Priif- 
summe fur jedes Segment; und 


35 


40 


45 


einem Mittel zum periodischen Wiederpriifen 
der Priifsummen nachdem ein vollstandiges 
Betriebssoftware-Paket gespeichert worden 
ist. 

32. Station gemaB Anspmch 31 , femer bestehend aus: 

einem Mittel zum Speichern von Standardfunk- 
tionssoftware fiir jede Station; und 

einem Mittel zum Ausfiihren derStandardfunk- 
tionssoftware, wenn die Prufsummen beim 
Wiederpriifen nicht festgestellt werden. 


50 33. Station gemaB einem der Anspriiche 29 bis 32, fer- 
ner bestehend aus: 

einem Mittel zum Feststellen des vollstandigen 
Betriebssoftware-Pakets nachdem es gespei- 
55 chert worden ist. 

34. Station gemaB Anspruch 33, femer bestehend aus: 
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einem Mittel zum Speichem von Standardfunk- 
tionssoftware fur die Station; und 

einem Mittel zum Ausfuhren der Standardfunk- 
tionssoftware, wenn das Feststellungsmittel 5 
bestimmt, daB das vollstandige Betriebssoft- 
ware-Paket nicht guttig ist. 


35. Station gemaB einem der Anspruche 29 bis 34, fer- 
ner bestehend aus: 

einem Zeitgebemiittel zum Beenden des Emp- 
fangs von Betriebssoftware-Segmenten nach 
einem vorgegebenen Zeitraum. 

36. Station gemaB Anspruch 35, femer bestehend aus: 

einem Mittel zum Speichern von Standardfunk- 
tionssoftware fur jede Station; und 

einem Mittei zum Ausfuhren der Standardfunk- 
tionssoftware, wenn das Zeitgebermlttel das 
Empfangen der Betriebssoftware-Segmente 
beendet. 

37. Station gemaB einem der Anspruche 29 bis 36, wo- 
bei das Ausfuhren der Betriebssoftware minde- 
stens eine Konverterfunktion des Kabelfernsehkon- 
verters bereitstellt. 

38. Station gemaB einem der Anspruche 29 bis 37, wo- 
bei ein vollstandiges Betriebssoftware-Paket eine 
Vielzahl von Funktionseinheiten beinhaltet, wobei 
die Station ferner aus foigendem besteht: 

einem Mittel zum Verhindern des Ausfuhrens 
heruntergeladener Betriebssoftware, wenn we- 
niger als alle Funktionseinheiten zum Ausfuh- 
ren vorhanden sind. 

39. Ein Verfahren zum Bereitstellen heruntergeladener 
Betriebssoftware fur einen adressierbaren, fernmo- 
diflzierbaren Kabelfernsehkonverterdurch eine Ka- 
belfernsehkopfstellenvorrichtung, bestehend aus 
folgenden Schritten: 

Ubertragen addressierbarer Konvertersteuer- 
daten auf einer Tragerfrequenz eines ersten 
Datenkanals eines Verteilerkabels eines Ka- 
belfernsehnetzwerks; 

Ubertragen der Betriebssoftware auf einer Tra- 
gerfrequenz eines zweiten Datenkanals des 
Verteilerkabels des Kabelfernsehnetzwerks; 

Bereitstellen einer Adresse in den adressierba- 
ren Konvertersteuerdaten, die spezifisch fur ei- 
nen einzeinen mit dem Netzwerkverbundenen 


Konverter Ist, wobei die Adresse emnoglicht, 
daB spezif ische Daten vom Konverter auf dem 
ersten Datenkanal empfangen werden; und 

Bereitstellen von Befehlen in den spezifischen 
Daten, wobei die Befehle bewirken, daB der 
Konverter von der Tragerfrequenz des ersten 
Kanals auf die Tragerfrequenz des zweiten Ka- 
nals schaltet, urn die auf dem zweiten Kanal 
ubertragene Betriebssoftware zu empfangen. 


Revendications 

15 1 . u n convertisseu r adressab le de television par cable 
k fonctionnalite modifiable a distance comprenant : 

un moyen recepteur de donn^es agile en fre- 
quence (52) capable de s'accorder sur differen- 
ce tes frequences porteuses pour recevoir des 
donnees de contr6le de convertisseur adressa- 
ble depuis une tete de r^seau de television par 
cable (10) sur une premiere vole de transmis- 
sion d'un cable de distribution (36) et pour re- 
25 cevoirun logiciel d'exploitation depuis ladite te- 
te de reseau sur une seconde vole de transmis- 
sion du cable de distribution (36) ; 

un moyen (54) pour accorder iedit moyen re- 
30 cepteur (52) sur ladite seconde voie de trans- 

mission en commutant d'une frequence porteu- 
se de la premiere voie de transmission sur une 
frequence porteuse de la seconde voie de 
transmission pour recevoir te logiciel d'exploi- 
35 tation en reponse a des instructions contenues 

dans lesdites donnees de controle de conver- 
tisseur adressable regues sur ladite premiere 
vole de transmission ; 

^0 un moyen memoire (60) pour memoriser le lo- 

giciel d'exploitation regu sur ladite seconde 
voie de transmission ; et 

un moyen processeur (50) couple audit moyen 
^5 memoire (60) pour acc6der au logiciel d'exploi- 

tation re^u depuis ladite tete de reseau (10) et 
I'executer af in de fournir au moins une fonction 
de convertisseur. 

50 2. Le convertisseur de la revendication 1 comprenant 
de plus : 

un moyen pour verifier I'integrite dudit logiciel 
d'exploitation regu sur ladite seconde voie de 
55 transmission ; et 

un moyen pour amener Iedit moyen processeur 
k executer le logiciel d'exploitation par defaut k 
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la place dudrt logiciel d'exploitation au cas ou 
I'integrit^ dudit logiciel d'exploitation ne se se- 
rait pas verifiee. 

3. Le convertisseur tel que ddfini dans Tune des re- 
vendications 1 ou 2 comprenant de plus : 

un moyen nninuteur pour renvoyer ledit r§cep- 
teur sur ladite premiere vole de transmission s'il a 
6te accord^ sur ladite seconde voie de transmission 
pendant un laps de temps predetermine. 

4. Le convertisseur de la revendication 3 dans lequel 
iedit laps de temps predetermine est speclfie dans 
des instmctions contenues dans lesdites donnees 
de controle de convertisseur adressable regues sur 
ladite premiere voie de transmission. 

5. Le convertisseur tel que d^fini dans Tune des re- 
vendications 3 ou 4 dans lequel la dur^e dudit laps 
de temps pr6d6tennln§ est fonction de la taille dudit 
logiciel d'exploitation devant §tre regu. 

6. Le convertisseur tel que ddfini dans Tune des re- 
vendications 1 k 5 dans lequel ledit logiciel d'exploi- 
tation impl6mente une disposition fonctionnelle des 
touches de clavier associ6e audit convertisseur 

7. Le convertisseur tel que defini dans I'une des re- 
vendications 1 k 6 dans lequel ledit logiciel d'exploi- 
tation implemente une fonction de retroaction pour 
aider un utilisateur k faire fonctionner le convertis- 
seur. 

8. Le convertisseur tel que defini dans Tune des re- 
vendlcations 1 k 7 dans lequel ledit logiciel d'exploi- 
tation implemente une fonction de controle pour un ' 
magnetoscope couple au convertisseur 

9. Le convertisseur tel que defini dans I'une des re- 
vendications 1 a 8 dans lequel ledit logiciel d'exploi- 
tation impl6mente un protocole de communication 
pour le convertisseur 

10. Le convertisseur tel que defini dans I'une des re- 
vendications 1 k 9 dans lequel ledit logiciel d'exploi- 
tation implemente une technique de desembroullla- 
ge pour le convertisseur 

11. Le convertisseur tel que defini dans I'une des re- 
vendications 1^10 dans lequel ledit logiciel d'ex- 
ploitation implemente un affichage a Tecran devant 
etre fourni par le convertisseur a une television a 
laquelle il est couple. 

12. Le convertisseur tel que d6fini dans I'une des re- 
vendications 1 & 11 dans leque! ledit logiciel d'ex- 
ploitation implemente une interface utilisateur pour 
des services fournis sur un reseau de television par 


cSble. 

13. Le convertisseur tel que defini dans I'une des re- 
vendicatlons 1 & 12 dans lequel ledit logiciel d'ex- 

5 ploitation implemente une fonction courrier eiectro- 
nlque devant etre foumie sur un reseau de televi- 
sion par c3ble. 

14. Le convertisseur tel que defini dans' I'une des re- 
10 vendications 1 a 13 dans lequel ledit logiciel d'ex- 
ploitation implemente une fonction de surveillance 
de I'audience. 

15. Le convertisseur tel que defini dans I'une des re- 
's vendications 1 k 14 comprenant de plus : 

un moyen pour autoriser la reception et ta me- 
morisation, par le convertisseur, du logiciel d'exploi- 
tation teiecharge uniquement en reponse a des ins- 
tructions specifiques regues par ledit moyen recep- 
20 teur de donnees. 

16. Le convertisseur tel que defini dans I'une des re- 
vendications 1^15 dans lequel ledit logiciel d'ex- 
ploitation est transmis sous une fonne encryptee et 

25 lesdites instructions contiennent une cie pour de- 
crypter le logiciel d'exploitation. 

17. Le convertisseur tel que defini dans I'une des re- 
vendications 1 & 16 dans lequel ledit logiciel d'ex- 

30 ploitation est regu en une pluralite de segments et 
lesdites instructions identifient le nombre de seg- 
ments devant etre regus pour un teiechargement du 
logiciel d'exploitation au complet. 

35 18. Le convertisseur de la revendication 17 compre- 
nant de plus : 

un moyen pour detenniner si lesdits segments 
ont tous ete regus de fagon valide ; et 

40 

un moyen pour recevoir des segments de rem- 
placementsi un segment, ou plus, dudit logiciel 
d'exploitation n'a pas ete regu de fagon valide. 

45 19. Le convertisseur tel que defini dans I'une des re- 
vendications 17 ou 18 comprenant de plus : 

un moyen pour empecher la reception dudit 
logiciel d'exploitation si le nombre de segments 
identifies par lesdites instructions est superieur a 

50 une iimite predetenninee. 

20. Appareil pourtete de reseau de television par cable 
pour teiecharger un logiciel d'exploitation sur un 
convertisseur adressable de television par ckble 
55 modifiable k distance (40), comprenant : 

un moyen (26) pour transmettre des donnees 
de contr6le de convertisseur adressable sur 
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une frequence porteuse d'une premiere voie de 
transmission de donnees d'un cSbie de distri- 
bution (36) d'un reseau de television parcSble ; 

un moyen (24) pour transmettre un loglciel 5 
d'exploitation sur une frequence porteuse 
d'une seconde voie de transmission de don- 
nees du cUble de distribution (36) dudit reseau 
de television par cable ; 

10 

un moyen (14) pourfoumir, dans lesdites don- 
nees de controle de convertisseur adressable, 
une adresse specifique a un convertisseur par- 
ticulier (40) couple au reseau, ladite adresse 
permettant audit convertisseur (40) de recevoir is 
des donnees specifiques sur ladite premiere 
voie de transmission de donnees ; et 

un moyen (50) pour foumir des Instructions 
dans lesdites donnees specifiques, lesdites 20 
instmctions amenant ledit convertisseur a com- 
muter de ladite fr6quence^porteuse de ladite 
premiere voie de transmission sur ladite fre- 
quence porteuse de ladite seconde voie de 
transmission afin de recevoir le loglciel d'ex- 25 
ploitation transmts sur ladite seconde voie de 
transmission. 


21. L'appareil de la revendication 20 comprenant de 
plus : 

un moyen pour verifier que le loglciel d'exploi- 
tation telecharge sur ledit convertisseur a ete regu 
avec succes par le convertisseur. 

22. L'appareil tel que defini dans Tune des revendica- 
tions 20 ou 21 comprenant de plus : 

un moyen de listage pour tenir un etat des 
f onctions q ue ledit convertisseur est autoris§ k avoir 
et pour attribuer, sur la base des fonctions autori- 
sees, un progiciel d'exploitation particulier devant 
etre t6l6charg6 sur ledit convertisseur. 

23. Un procede pour fournir a un convertisseur adres- 
sable de television par cSble des fonctions dictdes 
par le loglciel d'exploitation teiecharge, comprenant 
les etapes consistant : 

a recevoir des donnees de controle de conver- 
tisseur adressable depuis un emplacement de 
tete de reseau a distance sur une premiere voie 
de transmission d'un c^ble de distribution ; 

h commuter ledit moyen recepteur de donnees 
(52) d'une frequence porteuse de ladite pre- 
miere voie de transmission sur une frequence 
porteuse d'une seconde voie de transmission 
en reponse k des instructions contenues dans 
lesdites donnees de contr6le de convertisseur 


adressable ; 

a capturer un progiciel d'exploitation designe 
dans un ensemble de progiciels d'exploitation 
transmis depuis ledit emplacement de tete de 
reseau k distance sur ladite seconde voie de 
transmission du cable de distribution en repon- 
se a des instructions contenues dans lesdites 
donnees de controle de convertisseur 
adressable ; 

k memoriser le progiciel d'exploitation designe 
regu sur ladite seconde voie de transmission 
dans une memoire dont est muni ledit 
convertisseur ; et 

a executer ledit logtciel d'exploitation afin de 
fournir au moins une fonction de convertisseur 
dictee de ce fait. 

24. Le precede de la revendication 23 dans lequel les 
progiciels d'exploitation sent transmis sous fomne 
encryptee, ledit precede comprenant retape sup- 
piementaire consistant a : 

decrypter le loglciel d'exploitation capture en 
utilisant une cle contenue dans lesdites donnees de 
controle de convertisseur. 

25. Le precede de la revendication 23 ou de la reven- 
ue dication 24 comprenant les etapes suppiementai- 

res consistant : 

a surveitler ladite premiere voie de transmis- 
sion afin de recevoir lesdites donnees de con- 
35 trole de convertisseur adressable ; 

k commuter sur ladite seconde voie de trans- 
mission, apres reception d'instructions appro- 
priees sur ladite premiere voie de transmission, 
40 afin de capturer ledit loglciel d'exploitation ; et 

a commuter en retour sur ladite premiere voie 
de transmission une 

45 fois ledit loglciel d'exploitation capture. 

26. Le precede de la revendication 25 comprenant reta- 
pe suppiementaire consistant a : 

commuter en retour de ladite seconde voie de 
50 transmission sur ladite premiere voie de transmis- 
sion apres expiration d'un laps de temps predeter- 
mine si le togiciel d'exploitation n'a pas ete capture 
dans ledit laps de temps. 

55 27. Le precede de la revendication 26 comprenant reta- 
pe suppiementaire consistant k : 

trouver tedit laps de temps dans lesdites don- 
nees de contrdle de convertisseur adressable re- 
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gues sur ladite premiere voie de transmission. 

28. Le proced§ tel que d6finl dans Tune des revendica- 
tions 26 ou 27 dans lequel la dur^e du laps de temps 
est fonction de la taille dudit logiclel d'exploitation 
devant etre capture. 

29. Un terminal utilisateur modifiable & distance sous la 
forme d'un convertisseur de television par cable se- 
lon I'une des revendlcations 1 a 19, ledit terminal 
utilisateur comprenant : 

un moyen pour recevoir une pluralite de seg- 
ments de logiciel d'exploitation transmis de fa- 
9on cyclique fomnant ensemble un progiclel 
d'exploitation ; 

un moyen couple audit moyen r^cepteur pour 
verifier chaque segment apres sa r6ception ; 

un moyen sensibIe:;aLUdit moyen v6rfficateur 
pour m6moriser chaque. segment v6rlfi6 ; 

un moyen pour detenniner si un progiciel d'ex- 
ploitation au complet a et6 m§moris6 dans ledit 
moyen de memorisation k la fin d'un cycle de 
transmission de logiciel d'exploitation ; 

un moyen sensible audit moyen de d^tenmina- 
tion pour contlnuer de recevoir, verifier et m6- 
moriser des segments de logiciel d'exploitation 
transmis durant un cycle de transmission de lo- 
giciel d'exploitation ulterieur si ledit moyen de 
determination constate qu'un progiciel d'exploi- 
tation au complet n'a pas et6 m6moris6 ; et 

un moyen pour interrompre la reception desdits 
segments de logiciel d'exploitation apr^s cons- 
tat, par ledit moyen de d6temiinatlon, qu'un 
progiciel d'exploitationiau complet a 6t6 memo- 
rise. 

30. Le temriinal de la revendication 29 comprenant de 
plus : 

un moyen pour prevenir rex6cutlon desdits 
segments de logiciel d'exploitation tant qu'un progi- 
ciel d'exploitation au complet n'a pas et6 memorise. 

31 . Le temninal tel que d6fini dans I'une des revendica- 
tions 29 ou 30 dans lequel ledit moyen verificateur 
examine, pourchaque segment de logiciel Sexploi- 
tation, une somme de controle, ledit tenninal com- 
prenant de plus : 

un moyen pour tenir un etat de la somme de 
controle propre pour chaque segment ; et 
un moyen pour re-examiner p6riodiquement 
lesdites sommes de contrdle une fois qu'un 


progiciel Sexploitation au complet a ete memo- 
rise. 

32, Le tenninal de la revendication 31 comprenant de 
5 plus : 

un moyen pour memorlser un logiciel d'exploi- 
tation par defaut pour ledit tenninal ; et 

un moyen pour executer ledit logiciel d'exploi- 
tation par detaut si lesdites sommes de controle 
ne se sont pas verif lees apres avoir ete re-exa- 
minees. 

15 33. Le tenninal tel que defini dans I'une des revendlca- 
tions 29 ^ 32 comprenant de plus : 

un moyen pour valider le progiciel d'exploita- 
tion au complet une fois qu'il a ete memorise, 

20 34. Le tenninal de la revendication 33 comprenant de 
plus : 

un moyen pour memoriser un logiciel d'exploi- 
tation par defaut pour ledit tenninal ; et 

25 

un moyen pour executer ledit logiciel d'exploi- 
tation par defaut si ledit moyen de validation de- 
tennine que le progiciel d'exploitation au com- 
plet n'est pas valide. 

30 

35. Le tenninal tel que defini dans I'une des revendlca- 
tions 29 a 34 comprenant de plus : 

un moyen minuteur pour interrompre la recep- 
35 tion de segments de logiciel d'exploitation une 

fois un laps de temps predetennine ecouie. 

36. Le tenninal de la revendication 35 comprenant de 
plus : 

40 

un moyen pour memoriser un logiciel d'exploi- 
tation par defaut pour ledit tenninal ; et 

un moyen pour executer ledit logiciel d'exploi- 
^5 tation par defaut si ledit moyen minuteur inter- 

rompt la reception desdits segments de logiciel 
d'exploitation. 

37. Le tenninal tel que defini dans I'une des revendica- 
50 tions 29 a 36 dans lequel I'execution dudit logiciel 

d'exploitation foumit au moins une fonction de con- 
vertisseur du convertisseur de television par cable. 

38. Le temriinal tel que defini dans I'une des revendica- 
55 tions 29 k 37 dans lequel un progiciel d'exploitation 

au complet comporte une pluralite de modules, ledit 
terminal comprenant de plus : 

un moyen pour prevenir I'execution d'un logi- 


40 


37 


EP 0 732 850 B1 


ciel d'exploitation tel6charg6 si les modules ne sont 
pas tous disponibles pour I'ex^cution. 

39. Proc6d§ pourfoumir un logiciel d'exploitation t6l§- 
charg6 k un convertlsseur adressable de t^l6vision 5 
par cSble modifiable k distance gr§ce k un appareil 
de tete de r^seau de t§l6vision par cSble, compre- 
nant les 6tapes consistant : 

k transmettre des donnees de controle de con- io 
vertisseur adressable sur une frequence por- 
teuse d'une premiere vole de transmission de 
donnees d'un cable de distribution d'un reseau 
de television par cable ; 

15 

k transmettre ledit logiciel d'exploitation surune 
frequence porteuse d'une seconde vole de 
transmission de donnees du cable de distribu- 
tion dudit reseau de television par cable ; 

20 

k foumir, danslesdites donriees de controle de 
convertlsseur adressable, une adresse specif i- 
que k un convertlsseur particulier couple au re- 
seau, ladite adresse pemnettant audit conver- 
tlsseur de recevoir des donnees specifiques 25 
sur ladite premiere vole de transmission de 
donnees ; et 

k fournir des Instnjctions dans lesdites don- 
nees specifiques, lesdites instructions ame- 30 
nant ledit convertlsseur k commuter de ladite 
frequence porteuse de ladite premiere vole de 
transmission sur ladite frequence porteuse de 
ladite seconde voie de transmission afin de re- 
cevoir ledit logiciel d'exploitation transmis sur 35 
ladite seconde voie de transmission. 
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